Larry Switzer

About Larry Switzer

Information security professional focused on visibility and detection of attacks and compromises, including incident response and compliance. Manage security projects and security programs (SSDLC) as both an internal resource and consultant. Background in systems programming and network architecture provides the foundation for troubleshooting and security analysis expertise, and (along with project management background) gives the ability to understand and translate between security technical jargon and business risk. Work in consulting, operations, and development environments primarily as a technical lead, often mentoring less-experienced colleagues. Network security experience includes IDS/IPS, NextGen Firewalls, Web Access Firewalls (WAF), IAM, and PAM, along with supporting systems like DNS, load balancers, and proxies. Known for communications skills, interfacing with customers and other organizations, as well as providing written artifacts for NIST, ISO, and other GRC initiatives such as vulnerability management. Consulting and professional services experience includes- Heathcare providers (HIPPA/HITRUST)- Travel providers - Financial institutions - Gaming and multi-media providers - Energy companies (SCADA)- Manufacturing (SCADA/Plant Floor)- Telecommunications - Internet Retail - Cloud Service Provider (CSP)- Managed Security Service Provider (MSSP)

Experience

1. Principal Cyber Security Architect

   Motorola Solutions

   Mar 2020 — Present · Chicago, IL, US

   Managed product development security program including security reviews, SSDLC, vulnerability, and risk completing NIST and ISO compliance and meeting customer and marketing goals.• Implemented PAM solution with MFA, meeting IAM requirements for NIST and customers.• Architected PKI, PAM, and Remote Access solutions and Network Security solutions for Cloud and On Premises products.• Coordinated and managed secure development practices with compliance and customer requirements driving towards NIST 800-53 and FedRamp.• Used and managed use of tools including vulnerability scanners for source code, web, container, system and networks, including Rapid 7, Tenable Nessus, Mend, Prisma Cloud and others.• Mentored ‘security champion’ developers, site security contacts, and junior cyber security staff in security, risk, and compliance practices, working with over 50 people and more than a dozen products. • Managed Penetration testing for cloud and on premises products.• Established standards for cloud security development and implementation (including vulnerability and compliance management) meeting compliance and customer standards.• Provided internal and customer communications, incident response, and security visibility, quickly identifying, mitigating, and resolving security related issues.